This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer File: 2lexkcVbszGevZGC3A1Oau8-Ddg.cer (raw, json) Hash identifier: 3KFw6WcnBn2nE87KHqghNwZe4aGOSsUHIyjhenBxcM4= Subject key identifier: DA:57:B1:91:C5:5B:B3:31:9E:BD:91:82:DC:0D:4E:6A:EF:3E:0D:D8 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0275EB Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft caRepository: rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 18 Nov 2025 13:41:08 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 56135 AS: 133452 AS: 135662 IP: 43.250.68.0/22 IP: 101.234.72.0/22 IP: 103.29.192.0/22 IP: 103.78.108.0/23 IP: 103.118.162.0/23 IP: 2407:ac80::/32 IP: 2407:be00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161259 (0x275eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 18 13:41:08 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A912A31E, serialNumber=DA57B191C55BB3319EBD9182DC0D4E6AEF3E0DD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cc:5f:7d:9d:37:2c:78:1b:b7:85:86:83:e5: 69:8b:45:d3:a3:3f:23:73:7e:e8:3f:c5:c2:c0:38: 53:25:46:1a:52:66:be:0d:5a:44:13:4c:37:87:55: 52:b2:52:d9:b4:d0:3c:dd:93:b1:f3:5f:ae:43:5c: 92:94:5d:20:ee:43:6a:90:3d:4b:bb:7f:f7:48:45: f1:bc:d6:9d:5c:4f:6c:97:43:5e:bc:d1:85:db:88: 79:9a:f2:04:5b:ed:8d:3d:55:dc:b5:86:1e:2d:45: 1a:89:4d:1a:3d:6d:9d:a7:1d:c3:96:35:f8:ab:7e: c3:a2:58:09:5e:5b:6a:40:6c:60:bb:61:1f:de:f1: ff:ea:54:05:ac:a1:96:0d:60:69:3e:b1:23:75:ec: c6:cf:1d:4a:9d:91:3c:c9:1c:46:f3:97:bc:58:d0: 8f:b9:b0:08:8e:76:b1:cf:bb:a1:2d:9e:8f:a4:ae: d1:3d:a0:34:c0:54:21:46:65:67:3f:bd:1b:9c:19: b1:64:dc:d4:59:5a:3f:ab:c2:cf:f7:d1:26:0f:b0: e5:91:74:6d:ae:2e:c2:e8:2f:89:8a:3f:8a:97:c4: b2:5c:d1:54:2f:96:a4:b4:15:13:ee:68:c7:93:2f: b0:40:8b:6c:15:e3:9e:e1:4c:7b:86:11:69:49:24: 4a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:57:B1:91:C5:5B:B3:31:9E:BD:91:82:DC:0D:4E:6A:EF:3E:0D:D8 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 56135 133452 135662 sbgp-ipAddrBlock: critical IPv4: 43.250.68.0/22 101.234.72.0/22 103.29.192.0/22 103.78.108.0/23 103.118.162.0/23 IPv6: 2407:ac80::/32 2407:be00::/32 Signature Algorithm: sha256WithRSAEncryption 75:fc:69:28:da:f9:49:c2:c1:ab:cf:24:2a:c8:9c:05:07:66: 93:4b:12:01:7c:b0:ab:f7:67:58:1b:9c:a1:0e:de:df:db:e0: 53:f3:99:83:3f:b3:30:34:4a:22:5e:c3:1e:50:5a:8a:6e:53: 00:7d:37:8d:e2:3d:39:d3:cd:94:37:58:7c:cf:e0:5b:de:45: 38:0b:03:fb:11:00:d7:95:0d:b7:2e:df:2a:27:3e:08:66:19: eb:80:56:0c:40:9f:8c:c2:48:19:4c:fb:ce:0e:c6:9a:89:18: a1:50:98:5a:fa:48:46:d4:e1:d7:2f:bc:83:4a:89:6d:2d:27: d3:e2:67:c5:1c:2c:dc:f4:da:09:35:f2:31:a0:b7:58:46:21: b2:c0:3d:0e:f9:ee:1c:d8:df:14:68:fd:e5:a3:00:a8:e8:da: e4:4d:cb:33:b1:58:2e:b8:f2:eb:8a:c2:fa:26:a6:66:e6:c6: f3:64:7d:71:8e:70:3c:54:98:0b:12:ca:ce:d3:d3:16:ac:7c: fc:7f:50:36:fa:c4:f1:d0:75:52:31:79:aa:e0:7b:54:1e:66: 9d:36:c9:1d:7a:00:f9:36:08:60:e6:b6:00:d3:13:95:fb:49: 8f:9d:73:ff:81:77:85:c9:e8:80:72:d2:38:8a:f4:43:21:78: c7:75:ef:6e -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIDAnXrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExODEzNDEwOFoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxMkEzMUUxMTAvBgNVBAUTKERBNTdCMTkxQzU1QkIzMzE5RUJEOTE4 MkRDMEQ0RTZBRUYzRTBERDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrzF99nTcseBu3hYaD5WmLRdOjPyNzfug/xcLAOFMlRhpSZr4NWkQTTDeHVVKy Utm00Dzdk7HzX65DXJKUXSDuQ2qQPUu7f/dIRfG81p1cT2yXQ1680YXbiHma8gRb 7Y09Vdy1hh4tRRqJTRo9bZ2nHcOWNfirfsOiWAleW2pAbGC7YR/e8f/qVAWsoZYN YGk+sSN17MbPHUqdkTzJHEbzl7xY0I+5sAiOdrHPu6Etno+krtE9oDTAVCFGZWc/ vRucGbFk3NRZWj+rws/30SYPsOWRdG2uLsLoL4mKP4qXxLJc0VQvlqS0FRPuaMeT L7BAi2wV457hTHuGEWlJJEqhAgMBAAGjggNHMIIDQzAdBgNVHQ4EFgQU2lexkcVb szGevZGC3A1Oau8+DdgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTJBMzFFL0M4QTRDNEU0RThCQjExRURBOERCOEExRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyQTMxRS9DOEE0QzRFNEU4QkIxMUVEQThEQjhBMUZDNEY5QUUwMi8ybGV4a2NW YnN6R2V2WkdDM0ExT2F1OC1EZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDANtHAgMCCUwCAwIR7jBNBggrBgEFBQcBBwEB/wQ+MDwwJAQCAAEwHgME Aiv6RAMEAmXqSAMEAmcdwAMEAWdObAMEAWd2ojAUBAIAAjAOAwUAJAesgAMFACQH vgAwDQYJKoZIhvcNAQELBQADggEBAHX8aSja+UnCwavPJCrInAUHZpNLEgF8sKv3 Z1gbnKEO3t/b4FPzmYM/szA0SiJewx5QWopuUwB9N43iPTnTzZQ3WHzP4FveRTgL A/sRANeVDbcu3yonPghmGeuAVgxAn4zCSBlM+84OxpqJGKFQmFr6SEbU4dcvvINK iW0tJ9PiZ8UcLNz02gk18jGgt1hGIbLAPQ757hzY3xRo/eWjAKjo2uRNyzOxWC64 8uuKwvompmbmxvNkfXGOcDxUmAsSys7T0xasfPx/UDb6xPHQdVIxearge1QeZp02 yR16APk2CGDmtgDTE5X7SY+dc/+Bd4XJ6IBy0jiK9EMheMd1724= -----END CERTIFICATE-----Generated at Sat Dec 6 17:04:57 2025 by rpki-client